Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NvIPLddxzYov0RHf-VFDlQKU6Vc.cer
File: NvIPLddxzYov0RHf-VFDlQKU6Vc.cer (raw, json)
Hash identifier: ILMlal2fz6dU23a1vzuuUDKFlyWdnSylVTXglbUWd8E=
Subject key identifier: 36:F2:0F:2D:D7:71:CD:8A:2F:D1:11:DF:F9:51:43:95:02:94:E9:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9E63A83422
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/NvIPLddxzYov0RHf-VFDlQKU6Vc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 05:02:22 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 91.218.36.0/24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680276800546 (0x9e63a83422)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:02:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=36f20f2dd771cd8a2fd111dff95143950294e957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ea:f6:15:54:74:29:59:af:a3:76:63:82:12:
40:74:62:56:7f:b2:30:90:a3:f4:28:b3:65:d0:a4:
85:2a:47:0d:9f:fb:14:90:47:ec:7d:96:e2:3a:9b:
0d:aa:54:cf:62:20:4f:4d:e2:ad:28:6b:71:c5:0c:
e9:c8:33:57:79:f1:dd:59:88:84:e1:0d:a7:2e:92:
50:c4:ba:ba:a1:f8:4d:f3:9f:61:d9:d1:ef:40:0f:
ef:b6:7c:c0:99:e7:98:8d:b3:1c:a6:85:7f:e1:a5:
57:0e:26:59:5a:18:d8:90:ee:56:d2:ba:f4:1d:98:
0f:40:e0:a0:dc:a1:a3:87:6e:ad:41:3a:41:8f:f2:
f7:c9:73:d7:b8:41:04:41:a9:4b:94:76:e0:88:7d:
4a:d1:7b:e8:8f:d9:62:f0:67:76:28:45:9e:39:7d:
cc:61:c0:b1:89:93:0f:ef:1c:e5:b5:0c:12:7f:17:
71:e8:5e:db:da:6a:51:82:7d:ef:fb:3f:25:bc:e7:
32:78:db:67:e6:96:70:1c:ca:36:25:ff:a2:e4:f6:
98:94:6e:70:a9:94:14:73:c2:37:79:e5:49:70:34:
22:da:34:d9:cf:50:3a:6e:40:af:24:57:40:25:40:
f6:01:74:23:03:5d:5f:ca:a2:49:8a:34:cb:c5:8f:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:0F:2D:D7:71:CD:8A:2F:D1:11:DF:F9:51:43:95:02:94:E9:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/NvIPLddxzYov0RHf-VFDlQKU6Vc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.36.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:87:b4:ff:e7:49:96:18:7e:0e:a1:e7:63:c4:a3:c2:45:50:
40:49:91:e6:b0:39:b8:1b:82:0f:66:56:92:fd:da:c3:cc:b5:
53:25:1f:ab:1d:60:86:71:00:89:d1:fa:cf:16:dc:09:ac:04:
44:cf:13:98:08:59:04:9e:8f:0d:07:e3:c7:9e:9c:f6:1d:c4:
6a:8e:52:11:0a:b6:5e:c5:c7:1f:e4:0a:5d:98:0d:e3:6e:d1:
c0:4e:a5:fd:c1:2b:66:97:dc:4e:99:54:f5:a6:53:54:a0:7d:
f1:c2:8f:76:eb:34:9e:2f:bb:00:55:75:31:c2:ef:2a:1c:32:
da:22:2c:ac:20:69:7d:5a:af:70:0d:e7:a9:66:cb:da:4b:8a:
cf:7c:0f:25:e9:bf:a5:cb:52:c0:00:db:1e:7d:de:c0:80:a8:
8a:0c:1e:66:02:73:f6:b1:85:59:e6:88:67:13:34:c1:14:c9:
b3:90:b6:86:59:e8:d8:f1:a3:21:55:11:4b:4a:a0:90:c0:53:
a4:e4:2b:80:8d:ea:60:35:af:34:05:5e:03:9c:ed:41:5c:ef:
8c:94:12:57:37:70:3b:e7:50:6f:b1:72:44:7b:0a:be:b8:14:
5c:fb:21:81:a0:c0:87:65:5c:84:07:86:8e:2a:34:8b:2d:cd:
39:7f:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 17:06:31 2025 by rpki-client